Hackercool Magazine October 2024

Edition 7 Issue 10 8 years passed just like that. Yes, it’s been 8 years since we started Hackercool Magazine. Just like last year, this year too saw lot of developments in Hackercool Magazine and the office where it is made. However, just like kernel and package updates we have been seeing a lot in latest releases of penetration testing distros recently, many changes and updates that happened at Hackercool Magazine happened on backend. So, you may not even notice them or they even catch your attention. However, there are a few updates and new things that you may notice and even raise your head to get a better look. When you read this Issue, you will see that the article feature “Active Directory” is back. It’s first appearances ended…

Dogo jee (name changed) was viewing a website. He was living in Australia and just like a number of Tibetan Buddhists around the world, he was excited about the Kagyu Monlam festival to be held form December 15 to 21, 2023. The festival is held every year at Bodh Gaya, India and it attracts thousands of Buddhists who gather to pray for peace, listen to teachings and perform other activities. The festival is led by the Holy Lamas of Tibetan Buddhism. Dogo jee wanted to know more about the Kagyu Monlam as he wanted to visit it that year. So, he opened the website of Kagyu Monlam International Trust, an organization based in India that promotes Tibetan Buddhism internationally. As he was browsing through the website, he got an error…

Mozilla Firefox is one of the widely used browsers around the world. It is used by over 178 million people around the world. An RCE vulnerability in browsers is being exploited in the wild. The vulnerability, being tracked as CVE-2024-9680, has a severity of 9.8 out of 10 in CVSS rating. It also doesn’t require much complex action to exploit this vulnerability. The vulnerability is a use after free vulnerability in the animation timeline component of the browser. Animation timelines are a mechanism of Firefox web animation API and are used to control and synchronize animations on web pages. The credit for discovering this vulnerability goes to security researcher Damien Schaffer from Slovakian cybersecurity company ESET. The use-after-free vulnerability occurs when a memory that has been freed is still used…

Parrot Security OS, popularly called as Parrot OS, is a penetration testing operating system that differs from other hacking operating systems by focusing more on privacy apart from pen testing. The makers of Parrot OS have released the latest version of their operating system, Parrots Security OS 6.2. Let’s see what new features they have added to it. One of the most common ways cyber criminals get access to your data is through your employees. They’ll send fraudulent emails impersonating someone in your organisation and will either ask for personal details or for access to certain files. Links often seem legitimate to an untrained eye and it’s easy to fall into the trap. This is why employee awareness is vital. Updated tools As I always say, what is a new…

In April, US lawmakers urged President Joe Biden to ban Chinese-built electric vehicles (EVs), labelling them an “existential threat to the American auto industry”. The proposed ban arose from concerns that Chinese car makers have an unfair advantage due to government financial support. "Privacy concerns over internet-connected cars have been widely reported before. But the latest commentary goes beyond this, implying national security risks. Due to so much connectivity, it’s possible for hackers or even nation-states to attack connected vehicles." Following a monthslong investigation into digital connections that could enable Chinese spying and sabotage, in recent weeks the Biden administration proposed new rules to ban Chinese-made vehicles. The threats they cite stem from built-in internet connectivity for software updates and various remote controls. Is the US justified in aiming to…

According to Semperis, the company specializing in Active Directory (AD) Security, ransomware risk report 2024, 9 out of 1 0 hacking attacks target Active Directory. Out of these 9 attacks, over 87% of them completely disrupt the operations of an organization causing data loss and downtime. This should be enough to give you an idea about how important Active Directory security is. In the first article of this feature, you will learn in detail what Active Directory is, how is it useful and why many organizations use it etc. What is Active Directory? Active Directory is a set of services and a database that connects users of an organization with each other and allows them to share resources of the organization to get the work done. The database is present…